Privacy Policy

The short version

TuningLab needs three things to work: an account to hang your garage on, the photos of the car you want to tune, and a payment status if you subscribe. We run no advertising or analytics SDKs, we do not sell your data, and we do not use your photos to train models.

What we collect

• Account details — your email address, plus the name and email Apple or Google hand back if you use those sign-in buttons. Authentication runs through Supabase, so your password never reaches us.
• Your cars — the photos you upload, the previews generated from them, and the notes and goals you attach to a build.
• Subscription status — whether you have an active plan. Purchases run through Apple and RevenueCat, so card numbers never reach us either.
• Service logs — request timestamps and error traces kept by our API host, used to keep the thing running and nothing else.

What happens to your photos

When you add a car, the photo is uploaded to our storage and then passed to our image-generation provider, which renders the part onto it and hands the result back. Both the original and the render stay in your garage until you delete them.

Those files are served from a public storage bucket under long, unguessable paths. That is what lets the renderer and the app fetch them — but it also means anyone holding the exact link can open the image. Treat a car photo as shareable, and keep plates, faces, house numbers and documents out of frame if you would rather they were not.

Every preview is an AI-generated concept, not a photograph of a real installation.

Who else is involved

• Supabase — accounts, database and image storage.
• KIE AI — the image model that renders your parts. It receives the car photo and the part image for the length of the job.
• Apple and RevenueCat — subscription handling and receipt validation.
• Amazon Web Services — hosting for our API and for this website.

That is the whole list. There are no ad networks, data brokers or analytics vendors on it.

How long we keep things

Cars, photos and generated builds stay until you delete them or close your account. Deleting the account removes the garage and the images stored against it. Service logs roll off within 30 days.

Your rights

You can ask for a copy of your data, have it corrected, or have it deleted — write to support@thetuninglab.com from the address on your account and we will action it. If you are in the EU or the UK you also have the right to object to processing and to complain to your local data protection authority.

This website

thetuninglab.com is a set of static pages on a CDN. It sets no cookies, runs no tracking pixels and stores nothing in your browser. The language you land in comes from your own browser setting and is never sent anywhere.

Children

TuningLab is not aimed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If this policy changes in a way that affects what we collect or who we share it with, the date at the top of this page changes with it, and material changes are flagged in the app.